It’s not a new law. The GDPR has been around for years, but meta only recently lost a legal case saying that they cannot contractually force users to provide their data in exchange for access to the service.
But the GDPR also says consent has to be freely given, some interpet this as meaning that forcing people to pay in order for their data not to be used for ads is not freely given consent.
This article sounds extremely fishy and borderline conspiracy-like to me.
Imho the only guarantee of privacy I need is the source code.